An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade rubygem-ffiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-oauth-ttyUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-jwtUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-gssapiUpgrade rubygem-domain_nameUpgrade rubygem-snaky_hashUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_extUpgrade rubygem-unicode-display_widthUpgrade rubygem-localeUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-version_gemUpgrade rubygem-highlineUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cliUpgrade rubygem-oauthUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_discovery | May 4, 2023 | May 26, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | May 26, 2022 |
| Freebsd | — | Upgrade rubygem-actionview60Upgrade rubygem-actionpack70Upgrade rubygem-actionpack61Upgrade rubygem-actionpack52Upgrade rubygem-actionview70Upgrade rubygem-actionpack60Upgrade rubygem-actionview52Upgrade rubygem-actionview61 | Nov 4, 2022 | Apr 30, 2022 |
| Redhat_linux | — | Upgrade rubygem-ffiUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-loggingUpgrade rubygem-mime-types-dataUpgrade rubygem-fast_gettextUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade rubygem-multi_jsonUpgrade rubygem-unfUpgrade rubygem-http-acceptUpgrade rubygem-apipie-bindingsUpgrade rubygem-mime-typesUpgrade rubygem-jwtUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffi-debuginfoUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-foreman_maintainUpgrade rubygem-localeUpgrade rubygem-unicode-display_widthUpgrade foreman-cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-clampUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-highlineUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade satellite-maintainUpgrade python39-pulp_manifestUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffi-debugsource | May 4, 2023 | May 26, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfo | Mar 12, 2024 | May 26, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub